(filesets-cmd-shell-command): Quote buffer-file-name to protect whitespace and

metacharacters from the shell.

diff --git a/lisp/filesets.el b/lisp/filesets.el
index eb8cdb02617e2fef866ed918418abecc8ef073b1..6e6ffc3add0d11429a1dd8dc877f3c42c4ebf7cb 100644 (file)
--- a/lisp/filesets.el
+++ b/lisp/filesets.el
@@ -1701,7 +1701,7 @@ Replace <file-name> or <<file-name>> with filename."
                  ok)
              t)))
     (when ok
-      (let ((cmd (format txt (buffer-file-name))))
+      (let ((cmd (format txt (shell-quote-argument (buffer-file-name)))))
        (message "Filesets: %s" cmd)
        (filesets-cmd-show-result cmd
                                  (shell-command-to-string cmd))))))